Amendments to the Claims 



Listing of Claims 

1 . (currently amended) A method comprising: 

an account holder a ssociating a plurality of tokens with a financial account by 
recording the plurality of tokens in a n electronic token log, which electronic token log is 
accessible by a computing device of an institution that is responsible for authorizing one 
or more transactions involving the account; and 

the account holder initiating a transaction involving the financial account by 
providing one of the tokens previously recorded in the electronic token log and an 
indication of the account to a vendor, wherein the vendor is to provide the token, the 
indication of the account, and information about the transaction to the computing device 
oJ_the_authorizing institution, which authorizing institution 's computing device provides 
the vendor with transaction authorization based on the token being found to exist in the 
token log, 

wherein the vendor contacts the computing device of the authorizing institution 
through a communication channel that is distinct from a communication channel bv 
which the plurality of tokens are recorded in the electronic token log. 

2. (currently amended) The method of claim 1 , further comprising: 

the computing device of the authorizing institution receiving the token, the 
indication of the account, and the transaction information from the vendor; 

the computing device c hecking whether the token exists in the token log; and 
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the computing device n otifying the vendor that the transaction is authorized 
based on the token being found to exist in the token log. 

3. (currently amended) A method comprising: 

an account holder a ssociating a token with one or more conditions in an 
electronic token log that is accessible by the computing device of an institution that is 
responsible for authorizing one or more transactions involving a financial account; and 

the account holder initiating a transaction involving the financial account by 
providing the token and an indication of the account to a vendor, wherein the vendor is 
to provide the token, the indication of the account, and information about the transaction 
to the computing device of the institution responsible for authorizing that transaction, 
which authorizing institution 's computing device provides the vendor with transaction 
authorization based on the one or more conditions associated with the token in the 
token log being satisfied, 

wherein the vendor contacts the computing device of the authorizing institution 
through a communication channel that is distinct from a communication channel by 
which the plurality of tokens are recorded in the electronic token log . 

4. (currently amended) The method of claim 3, further comprising: 

the computing device of the authorizing institution receiving the token, the 
indication of the account, and the transaction information from the vendor; 

the computing device c hecking whether the token exists in the token log; and 



3 



the computing device n otifying the vendor that the transaction is authorized 
based on the token being found to exist in the token log. 

5. (currently amended) A method comprising: 

receiving from an account holder an indication of one or more conditions for 
completing one or more transactions; 

associating a token with the one or more conditions in a n electronic token log 
that is accessible by the computing device of a n institution that is responsible for 
authorizing one or more transactions involving a financial account; and 

the account holder initiating a transaction involving the financial account by 
providing the token and an indication of the account to a vendor, wherein the vendor is 
to provide the token, the indication of the account, and information about the transaction 
to the computing device of the institution responsible for authorizing that transaction, 
which authorizing institution 's computing device provides the vendor with transaction 
authorization based on the one or more conditions associated with the token in the 
token log being satisfied, 

wherein the vendor contacts the computing device of the authorizing institution 
through a communication channel thgt is distinct from g communication channel by 
which the plurality of tokens are recorded in the electronic token log . 

6. (currently amended) The method of claim 5, further comprising: 

the computing device of the authorizing institution receiving the token, the 
indication of the account, and the transaction information from the vendor; 
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the computing device of the authorizing institution checking whether the one or 
more conditions associated with the token in the token log are satisfied; and 

the computing device Of the authorizing institution notifying the vendor that the 
transaction is authorized responsive to the one or more conditions being satisfied. 

7. (previously presented) The method of claim 5, wherein the indication of the 
account is one of a credit card number, a debit card number, an online payment 
number, a merchant account number, and a bank account number. 

8. (currently amended) The method of claim 5, wherein the token log comprises an 
electronic data structure that associates specific tokens with one or more specific 
transaction conditions. 

9. (previously presented) The method of claim 5, wherein a transaction condition 
includes a maximum monetary amount for one or more specific transactions. 

10. (previously presented) The method of claim 5, wherein a transaction condition 
includes a pattern to match a name of the vendor for one or more specific transactions. 

1 1 . (previously presented) The method of claim 5, wherein a transaction condition 
includes a time-frame in which one or more specific transactions are to be completed. 
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12. (previously presented) The method of claim 5, wherein a transaction condition 
includes a number of times a specific token may be used to authorize transactions. 

1 3. (previously presented) The method of claim 5, wherein a transaction condition 
includes a minimum time interval between uses of a specific token to authorize 
transactions. 

14. (previously presented) The method of claim 5, wherein a transaction condition 
includes the existence of a specific token in the token log. 

1 5. (previously presented) The method of claim 5, wherein a transaction condition 
includes a mechanism for non-repudiation of the financial transaction. 

1 6. (previously presented) The method of claim 6, wherein the token log is stored in 
a communication device of the account holder. 

1 7. (previously presented) The method of claim 1 6, wherein the communication 
device is one of a telephone, a cell phone, a desktop computer, and a portable 
computing device. 

18. (previously presented) The method of claim 16, wherein checking whether the at 
least one condition associated with the token in the token log is satisfied is 
accomplished by polling the account holder's communication device. 
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1 9. (previously presented) The method of claim 1 8, wherein polling the account 
holder's communication device comprises: 

sending to the account holder's communication device a structured message 
containing transaction information and the specific token; and 

receiving from the account holder's communication device a structured message 
indicating whether the transaction is approved or denied based on the satisfaction of the 
one or more conditions. 

20. (previously presented) The method of claim 18, wherein polling the account 
holder's communication device includes: 

sending to the account holder's communication device a structured message 
containing the specific token; 

receiving from the account holder's communication device information from the 
token log pertaining to the given token; and 

using the information to determine if the transaction should be approved or 
denied. 

21 . (previously presented) The method of claim 6, wherein the token log is stored at 
the location of the institution responsible for authorizing one or more transactions 
involving the financial account. 
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22. (previously presented) The method of claim 6, wherein the token log is stored at 
a third-party location accessible to both the account holder and the institution 
responsible for authorizing one or more transactions involving the financial account. 

23. (previously presented) The method of claim 6, wherein the vendor is one of a 
seller of physical goods, a seller of services, a charitable organization, and an 
organization to which the account holder owes money. 

24. (previously presented) The method of claim 5, wherein associating one or more 
tokens includes receiving the at least one condition for the one or more tokens from an 
external source. 

25. (previously presented) The method of claim 5, wherein entries in the token log 
include an indication of a type of transaction corresponding to one or more specific 
tokens. 

26. (previously presented) The method of claim 5, further comprising automatically 
creating one or more token within a communication device of the account holder. 

27. (previously presented) The method of claim 5, wherein providing the token to a 
vendor includes entering a pass code in order to access the desired token. 
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28. (previously presented) The method of claim 5, wherein providing the token to a 
vendor includes presenting a token that is known by the account holder to have been 
previously stored in the token log. 

29. (cancelled) 

30. (cancelled) 

31 . (currently amended) A n electronic computing system comprising: 

a token creator to enter and store one or more tokens in a computer memory: 

a token log to associate in the nomputer memory specific tokens with specific 
conditions under which specific financial transactions will be valid; and 

a token access sub-system to make one or more tokens available to an account 
holder for distribution to one or more vendors involved in transactions pertaining to an 
account of the account holder, wherein each vendor is to provide a specific token, an 
indication of the account, and information about a transaction to an institution 
responsible for authorizing one or more transactions involving the account, which 
institution looks up the specific token in the token Ipg and authorizes each vendor to 
complete each vendor's transaction responsive to the specific conditions associated 
with each specific token in the token log being satisfied, 

wherein the institution looks up the specific token in the token log through a 
communication channel that is distinct from a communication channel by which the 
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institution is provided with the token, the indication of the account, and information 
about the transaction. 

32. (previously presented) The system of claim 31 , wherein the indication of an 
account is one of a credit card number, a debit card number, an online payment 
number, a merchant account number, and a bank account number. 

33. (currently amended) The system of claim 31 , wherein the token log comprises an 
electronic data structure that associates specific tokens with one or more specific 
transaction conditions. 

34. (previously presented) The system of claim 31 , wherein the specific conditions 
include a maximum monetary amount for one or more specific transactions. 

35. (previously presented) The system of claim 31 , wherein the specific conditions 
include a pattern to match a name of the vendor for one or more specific transactions. 

36. (previously presented) The system of claim 31 , wherein the specific conditions 
include a time-frame in which one or more specific transactions are to be completed. 

37. (previously presented) The system of claim 31 , wherein the specific conditions 
include a number of times a specific token may be used to authorize transactions. 
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38. (previously presented) The system of claim 31 , wherein the specific conditions 
include a minimum time interval between uses of a specific token to authorize 
transactions. 

39. (previously presented) The system of claim 31 , wherein the specific conditions 
include the existence of a specific token in the token log. 

40. (currently amended) The-An electronic computing system pf g fingnpigl institution 
comprising: 

a communication interface for receiving a token, an indication of an account, and 
information about a transaction from a vendor , which token was previously stored bv an 
account holder in an electronic token log that is not accessible by a vendor but is 
accessible by the financial institution; 

a transaction authorization module for checking whether at least one condition 
associated with the token in the token log is satisfied; 

wherein the communication interface is to notify the vendor that the transaction is 
authorized responsive to the at least one condition being satisfied , and. 

wherein the token, the indication of the account, and the information about the 

transaction are received at the communication interface through a communication 
channel that is distinct from a communication channel by which the transaction 
authorization module checks whether the at least one condition associated with the 
token in the token log is satisfied. 
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41 . (currently amended) An - computing apparatus comprising: 

means for an account holder storing one or more tokens in a n electronic token 

log; 

means for the account holder a ssociating each token in the electronic token log 
with conditions under which specific financial transactions are valid; 

means for the account holder a ccessing tokens so that they can be associated 
with specific financial transactions; and 

means for a financial institution authorizing specific transactions by verifying that 
the conditions for the tokens associated with the specific transactions are met, 

wherein the financial institution authorizes specific transactions through a 
communication channel that is distinct from a communication channel by which the 
tokens are associated with conditions in the electronic token log. 

42. (currently amended) A computer-readable medium comprising: 

program code for receiving from an account holder an indication of one or more 
conditions for completing one or more transactions; 

program code for associating a token with the one or more conditions in an 
electronic token log that is accessible by an institution that is responsible for authorizing 
one or more transactions involving a financial account; and 

program code for the account holder f acilitating the initiation of a transaction 
involving the financial account by providing the token and an indication of the account to 
a vendor, wherein the vendor is to provide the token, the indication of the account, and 
information about the transaction to the institution responsible for authorizing that 
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transaction, which authorizing institution retrieves the token from the token log and 
provides the vendor with transaction authorization based on the one or more conditions 
associated with the token in the token log being satisfied, 

wherein the vendor contacts the institution responsible for authorizing the 
transaction through a communication channel that is distinct from a communication 
channel by which the plurality of tokens are associated with one or more conditions in 
the electronic token log. 

43. (previously presented) The computer-readable medium of claim 42, further 
comprising: 

program code for receiving the token, the indication of the account, and the 
transaction information from the vendor; 

program code for checking whether the one or more conditions associated with 
the token in the token log are satisfied; and 

program code for notifying the vendor that the transaction is authorized 
responsive to the one or more conditions being satisfied. 
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